a9701060ae1442e96fccb2c8e9c67c971d9f98d3c86e75bc711db06ad76b6d1d

Analysis

user interaction
yes
max time kernel
210s
max time network
227s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 17:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Synthesizer V Studio Basic 1.11.2/Windows/svstudio-basic-setup.exe
Size 47.5MB
Sample260802-v5bf2sdm2z
SHA256 a9701060ae1442e96fccb2c8e9c67c971d9f98d3c86e75bc711db06ad76b6d1d
MD5 afa6e56a9026e4015793d5b449319537
SHA1 bc01b55263e26c00d9f9447b91684b188add73ca
SHA512 4230803532a7ae02860ff9d0a01d9b5ced9e8daa313a6b2141bbffc26221e9032f46fce066c9ae2cec923b44d392d6c1d5089ef88cf20c71d35fbb6f6bf7df40
SSDEEP 786432:lX1N7l1gECC/X/lSnbkDr+WDHnCqzyVcj+FAqBKpVpdon+59jJep1hhnt/q:lbB1g6/E2DHCqe6j+FAwcpd8+ngpLhnE
TLSH
T192B7333BB228253FD56E1B3155739220D87F6B9279168D1E2BF10A4CCF268710E3B75A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion discovery installer spyware trojan

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
2408	synthv-studio.exe
2408	synthv-studio.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 35 IoCs

description	ioc	Process
File created	C:\Program Files\Synthesizer V Studio Basic\is-S6DFS.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-ORBVR.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\is-30686.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\is-MNNI6.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-S1Q3J.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-43124.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-JST9T.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-PK1LP.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-KFVL9.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-KU0QM.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-5G3VP.tmp	svstudio-basic-setup.tmp
File opened for modification	C:\Program Files\Synthesizer V Studio Basic\synthv-studio.exe	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-ODNBU.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-9QURR.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\is-M9IQS.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-LM8DH.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-72UP0.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-E8196.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\unins000.dat	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-4NTP3.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-V9A41.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-54JQ5.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\is-B1M0T.tmp	svstudio-basic-setup.tmp
File opened for modification	C:\Program Files\Synthesizer V Studio Basic\unins000.dat	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-FNVM5.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-22BAN.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-VJC2H.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-DLF3A.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-K8FHQ.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\is-AN4IL.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\is-TAG85.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\fonts\is-HQV81.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-MR6LU.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\clf-data\is-I0A1H.tmp	svstudio-basic-setup.tmp
File created	C:\Program Files\Synthesizer V Studio Basic\is-VBID8.tmp	svstudio-basic-setup.tmp

Executes dropped EXE 3 IoCs

pid	Process
4736	svstudio-basic-setup.tmp
720	_setup64.tmp
2408	synthv-studio.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	svstudio-basic-setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	svstudio-basic-setup.tmp

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral2/memory/3408-0-0x0000000000400000-0x00000000004D5000-memory.dmp	innosetup
behavioral2/memory/3408-7-0x0000000000400000-0x00000000004D5000-memory.dmp	innosetup
behavioral2/memory/3408-169-0x0000000000400000-0x00000000004D5000-memory.dmp	innosetup

Modifies registry class 36 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\.svpk	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Dreamtonics.s5pfile\DefaultIcon	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.s5pfile\shell\open	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpfile\shell\open	svstudio-basic-setup.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpkfile\ = "Synthesizer V Studio Installation Package"	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\.svp	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpfile	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Dreamtonics.svpkfile\DefaultIcon	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\.s5p	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Dreamtonics.svpfile	svstudio-basic-setup.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpfile\DefaultIcon\ = "C:\\Program Files\\Synthesizer V Studio Basic\\svp-icon.ico"	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Dreamtonics.svpkfile\shell\open\command	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpkfile\shell	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpkfile\shell\open	svstudio-basic-setup.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.svpk\ = "Dreamtonics.svpkfile"	svstudio-basic-setup.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.s5pfile\DefaultIcon\ = "C:\\Program Files\\Synthesizer V Studio Basic\\svp-icon.ico"	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Dreamtonics.s5pfile\shell\open\command	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.s5pfile\shell\open\command	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Dreamtonics.svpfile\DefaultIcon	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Dreamtonics.svpkfile	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Dreamtonics.s5pfile	svstudio-basic-setup.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpfile\shell\open\command\ = "\"C:\\Program Files\\Synthesizer V Studio Basic\\synthv-studio.exe\" \"%1\""	svstudio-basic-setup.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpkfile\DefaultIcon\ = "C:\\Program Files\\Synthesizer V Studio Basic\\svpk-icon.ico"	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpkfile	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpkfile\shell\open\command	svstudio-basic-setup.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.s5p\ = "Dreamtonics.s5pfile"	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.s5pfile	svstudio-basic-setup.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.s5pfile\shell\open\command\ = "\"C:\\Program Files\\Synthesizer V Studio Basic\\synthv-studio.exe\" \"%1\""	svstudio-basic-setup.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.s5pfile\ = "Synthesizer V Editor Project"	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\Dreamtonics.svpfile\shell\open\command	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpfile\shell\open\command	svstudio-basic-setup.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.svp\ = "Dreamtonics.svpfile"	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.s5pfile\shell	svstudio-basic-setup.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpfile\ = "Synthesizer V Studio Basicject"	svstudio-basic-setup.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpfile\shell	svstudio-basic-setup.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Dreamtonics.svpkfile\shell\open\command\ = "\"C:\\Program Files\\Synthesizer V Studio Basic\\synthv-studio.exe\" \"%1\""	svstudio-basic-setup.tmp

Modifies system certificate store 2 TTPs 2 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\925A8F8D2C6D04E0665F596AFF22D863E8256F3F	synthv-studio.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\925A8F8D2C6D04E0665F596AFF22D863E8256F3F\Blob = 5c0000000100000004000000000800000b000000010000006200000041006d0061007a006f006e00200053006500720076006900630065007300200052006f006f007400200043006500720074006900660069006300610074006500200041007500740068006f00720069007400790020002d002d002000470032000000090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b0601050507030853000000010000002500000030233021060b6086480186fd6e0107180330123010060a2b0601040182373c0101030200c0620000000100000020000000568d6905a2c88708a4b3025190edcfedb1974a606a13c6e5290fcb2ae63edab51400000001000000140000009c5f00dfaa01d7302b3888a2b86d4a9cf21191831d000000010000001000000052135310639a10f77f886b229b9f7afc7f000000010000000c000000300a06082b060105050703037e00000001000000080000000080c82b6886d701030000000100000014000000925a8f8d2c6d04e0665f596aff22d863e8256f3f2000000001000000f3030000308203ef308202d7a003020102020100300d06092a864886f70d01010b0500308198310b30090603550406130255533110300e060355040813074172697a6f6e61311330110603550407130a53636f74747364616c6531253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e313b303906035504031332537461726669656c6420536572766963657320526f6f7420436572746966696361746520417574686f72697479202d204732301e170d3039303930313030303030305a170d3337313233313233353935395a308198310b30090603550406130255533110300e060355040813074172697a6f6e61311330110603550407130a53636f74747364616c6531253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e313b303906035504031332537461726669656c6420536572766963657320526f6f7420436572746966696361746520417574686f72697479202d20473230820122300d06092a864886f70d01010105000382010f003082010a0282010100d50c3ac42af94ee2f5be19975f8e8853b11f3fcbcf9f20136d293ac80f7d3cf76b763863d93660a89b5e5c0080b22f597ff687f9254386e7691b529a90e171e3d82d0d4e6ff6c849d9b6f31a56ae2bb67414ebcffb26e31aba1d962e6a3b5894894756ff25a093705383da847414c3679e04683adf8e405a1d4a4ecf43913be756d60070cb52ee7b7dae3ae7bc31f945f6c260cf1359022b80cc3447dfb9de90656d02cf2c91a6a6e7de8518497c664ea33a6da9b5ee342eba0d03b833df47ebb16b8d25d99bce81d1454632967087de020e494385b66c73bb64ea6141acc9d454df872fc722b226cc9f5954689ffcbe2a2fc4551c75406017850255398b7f050203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020106301d0603551d0e041604149c5f00dfaa01d7302b3888a2b86d4a9cf2119183300d06092a864886f70d01010b050003820101004b36a6847769dd3b199f6723086f0e61c9fd84dc5fd83681cdd81b412d9f60ddc71a68d9d16e86e18823cf13de43cfe234b3049d1f29d5bff85ec8d5c1bdee926f3274f291822fbd82427aad2ab7207d4dbc7a5512c215eabdf76a952e6c749fcf1cb4f2c501a385d0723ead73ab0b9b750c6d45b78e94ac9637b5a0d08f15470ee3e883dd8ffdef410177cc27a9628533f23708ef71cf7706dec8191d8840cf7d461dff1ec7e1ceff23dbc6fa8d554ea902e74711463ef4fdbd7b2926bba961623728b62d2af6108664c970a7d2adb7297079ea3cda63259ffd68b730ec70fb758ab76d6067b21ec8b9e9d8a86f028b670d4d265771da20fcc14a508db128ba	synthv-studio.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4736	svstudio-basic-setup.tmp
4736	svstudio-basic-setup.tmp
2408	synthv-studio.exe
2408	synthv-studio.exe
2408	synthv-studio.exe
2408	synthv-studio.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2408	synthv-studio.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	5500	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	5500	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4736	svstudio-basic-setup.tmp

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2408	synthv-studio.exe
2408	synthv-studio.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3408 wrote to memory of 4736	3408	svstudio-basic-setup.exe	89
PID 4736 wrote to memory of 720	4736	svstudio-basic-setup.tmp	91
PID 4736 wrote to memory of 2408	4736	svstudio-basic-setup.tmp	94

C:\Users\Admin\AppData\Local\Temp\Synthesizer V Studio Basic 1.11.2\Windows\svstudio-basic-setup.exe
"C:\Users\Admin\AppData\Local\Temp\Synthesizer V Studio Basic 1.11.2\Windows\svstudio-basic-setup.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3408
- C:\Users\Admin\AppData\Local\Temp\is-C80DQ.tmp\svstudio-basic-setup.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-C80DQ.tmp\svstudio-basic-setup.tmp" /SL5="$400AA,48935032,819712,C:\Users\Admin\AppData\Local\Temp\Synthesizer V Studio Basic 1.11.2\Windows\svstudio-basic-setup.exe"
  2⤵
  - Drops file in Program Files directory
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4736
- - C:\Users\Admin\AppData\Local\Temp\is-K3HTU.tmp\_isetup\_setup64.tmp
    helper 105 0x45C
    3⤵
    - Executes dropped EXE
    PID:720
- - C:\Program Files\Synthesizer V Studio Basic\synthv-studio.exe
    "C:\Program Files\Synthesizer V Studio Basic\synthv-studio.exe"
    3⤵
    - Suspicious use of NtSetInformationThreadHideFromDebugger
    - Executes dropped EXE
    - Modifies system certificate store
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of SetWindowsHookEx
    PID:2408

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004F8 0x00000000000004D8
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5500

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

f0.dnni

Path C:\Program Files\Synthesizer V Studio Basic\f0.dnni
Size 1.7MB
SHA256 5a21cadf5012e838661d982e68f9a84038427ad0b44631bc088e2631871cd95e
MD5 485465e238c914c2488aac22f5702eb5
SHA1 ff0129581b6505dd450cd9fb0a5868b039ffda5f
SHA512 b0e7fdc6306539dc4ca5bbbfb88b4b09e51df389c3e0a03f7a7c5d5eedfab4c22ddf1703d78661f3bc1ee33d1dd01d08a7dffa11410b4012a22e600dc3ca55b6
SSDEEP 49152:IB4kTJEvKgc+cSVG9VmBY4vMhvEdq1so71Olp:IQ1RcSIVmHM9Eeso71C
TLSH
T16585330893A5175FF5D024F97432F6FCBF286DEF816B4B8762EC240759E42825A4389E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NotoSansCJKjp-Regular.otf

Path C:\Program Files\Synthesizer V Studio Basic\fonts\NotoSansCJKjp-Regular.otf
Size 15.7MB
SHA256 f18253affd968c8ea592d8df6d84b1d4c5d3a46d267e53a1f6749e6c4f76a23d
MD5 7ed4b9a7daaf1d1c71903a92059434fb
SHA1 03d1f98398da4ba4137aa177d419a2240ebe17fe
SHA512 993b2457eb9b9ffa3f023e9bfac77f97444df196047951dd22de0fa683b97eb5ff46fc01bb34697c9307794b0f9d8a24fbff531416bfd7d11597a8cfac891c61
SSDEEP 393216:WaxAaLuP4Khf/ypeQIesikPbvTuYbRvl8bJTimvAOopd/NtZCnpI4w1FT1IixLtv:WlaCP46f/ZQIykPbruYlvl8F//YhJCnM
TLSH
T145F6127E68FC6828CC57D1367646A53E66D90848854FE0FCE4D39FB23EE52240B6D6C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

synthv-studio.exe

Path C:\Program Files\Synthesizer V Studio Basic\synthv-studio.exe
Size 19.2MB
SHA256 7446bd0883b840c9f2feb1afae79c32beec15d3519f640e3c6f594d85aa1ea4e
MD5 9aba06372cee609a40afb8d4451d4b5b
SHA1 83d1b4997588d07a9fd1e2174401e05a5d963e97
SHA512 e63a332f37a9fb307d551de7bf89625da8621fb32415db5d23d423069167cb6f0346b0336fade392da068376f64c14d0125b7f8983eb116860f468ee85715564
SSDEEP 393216:iFTfxKY5ifquBk/N9kUZ0GN4q+kSoQT0YzMLVYuA0Ylcadb/p2khPYz:iFTfxIfZBSBiiF6Ldu4db/6z
TLSH
T15717330639DEC2E8D38647F0244911D976F6E29580FE9A193BD30D057B41F2F816AEFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

svstudio-basic-setup.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-C80DQ.tmp\svstudio-basic-setup.tmp
Size 3.0MB
SHA256 d5ab0fcfdb9d2bd3229689a5c4b238e4cc9bf5817d1e1138af52fa441c58a979
MD5 edfef063d5ae83a69c0cdc24caa96326
SHA1 5cce12c6ecac7a971de94a43f931046406da40b0
SHA512 09889e8928f6cb7428f2f5c6727364f94a4dfc322810b829a3f6184084781bf30818054af7a47e0d7ffc74645a89b8f702acf69b8e3b8f9b21cb4847935fc8a2
SSDEEP 49152:sWGtLBcXqFpBR6SVb8kq4pgquLMMji4NYxtJpkxhGjIHTbO333dx:otLutqgwh4NYxtJpkxhGl333r
TLSH
T1BAE53A17F28C713ED06B3A364A33C690983BF66169168C2797FC794C8F365942A3E647
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_setup64.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-K3HTU.tmp\_isetup\_setup64.tmp
Size 6KB
SHA256 388a796580234efc95f3b1c70ad4cb44bfddc7ba0f9203bf4902b9929b136f95
MD5 e4211d6d009757c078a9fac7ff4f03d4
SHA1 019cd56ba687d39d12d4b13991c9a42ea6ba03da
SHA512 17257f15d843e88bb78adcfb48184b8ce22109cc2c99e709432728a392afae7b808ed32289ba397207172de990a354f15c2459b6797317da8ea18b040c85787e
SSDEEP 96:sfkcXegaJ/ZAYNzcld1xaX12p+gt1sONA0:sfJEVYlvxaX12C6A0
TLSH
T198C1E80ECA279263FD5A09B79E8219C46FFC262339C6623FCF0045D667C1E4E59A17B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

session-2408

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\recovery\session-2408
Size 17B
SHA256 2c43182a027ffa22c592d18f583606ca78bd71f0b2719b5000603efbcdcb1bfa
MD5 6b8958aee85e5886f759b92e5cc697ef
SHA1 51b78fc694f2cabd2af66d3695dcf9b7d0966b7e
SHA512 8f3bf4d29304b653289cc1488658aa9b41971d1640c33fea2f9a1b9de786f88138874a5e00cfb16e45d80530f1eb3ebe74ccd388b5f8da48670e6a7b06d22a8b
MD5 SHA1 SHA512

Submit Download

settings.xml

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\settings\settings.xml
Size 129B
SHA256 fa2bcaa706e3c86e1e0d97e837791fb43d1651d2c3d48a34704e1e09a427b07e
MD5 9d968cb5e460c8d43313c6d5e26fe62f
SHA1 1b92704da5123f487ea7388e81f0675777232c44
SHA512 380b0cf5af126f795787e7d5c71a4feb9e8c2390362cb1f458598c57da5ce5e30b1148a4abd77cbb6b24ee77ebd214d84cb8790a7a7510623ab61af60297a02d
TLSH
T12BB092EA2102AD6A17A35A219A5ACD441271A5ED09C21A6426AB09A3254A8D807C728D
MD5 SHA1 SHA512 TLSH

Submit Download

de-de.txt

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\translations\de-de.txt
Size 23KB
SHA256 1124202d8ff6a085049dbec76b7f61534f90fe0dcb844667fca6b271f465eaf4
MD5 ff0daf1129486e4e4e16f5d69c983103
SHA1 bf2f09bc12def087df135958d4d67d4ee27ce1bf
SHA512 b9cb445120dca66e599ca808d93dc08854e72c2d2d62b1038d874ccf5d5f73177484cc879225d0a2f9cecd7db5934de46ab9ef3df01cd396ec7bdf8b9fc9cac5
SSDEEP 384:qn7a9fjGPSXUtpzq4ztTYE40L4xbWD/naV73nv/L+Z1zEjrqueg2l8ocZjV6:njGaktpRYE40MxbW7ahs18h0lbX
TLSH
T199B2A53999038A3416F9C345A1128E6BFA158F52533D181D359FD60D0FAF82B52EB37E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es-la.txt

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\translations\es-la.txt
Size 36KB
SHA256 69f97521f5799374f93ab68b08b89c8576500c25a0493aef4ba5947f7923bd3c
MD5 27f0417fb1edc4c95456bcdd51aacd8a
SHA1 61c5ee83cf26c71fc8116fe56346f07baea364ec
SHA512 4d4be7cc40cd421cfe85a18768a9ee1e16cad069f4bc08d9ad41d6abfc632a854d9eddebd34de03c7aac658fa3eae07789d8a7b110b1f78a01720d7ccf753d66
SSDEEP 768:oNvyxjGy1nKXOSoPqkxMTEaEk6g1Gi2XtujfcVF8BTuZhC:ow1KXCPqkxMwkpH2XtGcVF8BTuZhC
TLSH
T1C403A43CE6C20F3014F6424AA112D623F5904B56337D885E709F965C2BADE5F86E73AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr-fr.txt

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\translations\fr-fr.txt
Size 24KB
SHA256 74c4c0629360841e712643fce00bea02fcaeec75c9c70e5b911976b8d998f9c6
MD5 71d0a2f7195342c08a0a16d799887b27
SHA1 3f03b51670890626d61e3787851dbee8d294b271
SHA512 4f5e718202fb5d68991de11ed5a4c44aa9c5b209dbfbbe5f25d24d199bf89e4b6f353be1070639dcb2a0aad1234174bf7b7e8818472571c2d31f327cd115c0b7
SSDEEP 384:EWJHZGA4BTWDHfGiuVEiQ+kZXZlFpSQvRf4kyhVm:bJ5F4BiDHfGiuVE9+kZ5f4M
TLSH
T19EB2A529E5C1553004F6429AE112DA17F9288F96237C1A2C78CBDA0D0BAE96F93D737D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ja-jp.txt

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\translations\ja-jp.txt
Size 63KB
SHA256 95f48164bc252d57999e858510f6bec592dda68813285e615d61fb865e0f539b
MD5 66f44f04c32a4782a5cb7e1d878313be
SHA1 ac7812f53fd040784c9c7f65a8e1d460492f25fa
SHA512 be4de477c0eae38af8c12755b9ac9b88e6fc5254cff5938e6c60c621b65947ed37821993a0cfc2222943b0ede7b5d261278efb2d1dbdc4bf03f861310ad4828a
SSDEEP 768:MYFadikqjwh0fTbkqbKEzoxw+WZ93KScgdaf4llv2EXMjpp61G5VBCjjKb9hYE9Z:MD/GreEc1WZ93KScgWo2EXXSVB9/YA7l
TLSH
T11353702CE38159390C72C2A614497AC2E9068F0AEE7E2A2D342FD42C6F6C55FE5D577C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ko-kr.txt

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\translations\ko-kr.txt
Size 40KB
SHA256 ed6ad686f92546ea0c100f4ee41aededfa020ed604cc6419cc197a04b1ce24bf
MD5 0f090205ac60946f9ea03b57a2df64d2
SHA1 9dd52c0c636bb7ba6725d2fd94263e6c645074d4
SHA512 99d5b4225aa31a3b3fa947051e5a2b5dd7c6bca7cecb7c9481d4cc2f2602f2e1662a42a479bb5a018b79a51e70a0a6253314cca1fead72c05e02058d356e2d14
SSDEEP 768:6ASPHr+7fDeGjrPFiE/na1v4o9cBAPb1GrWh90CojgBBzPA:0cSIFDna1vT9GARPh9AgBBz4
TLSH
T14303C6B9B4830A6811F7850DA851A154E6818B27BB3E084CBC4FCD0C8F6D57B55DB7BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-br.txt

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\translations\pt-br.txt
Size 54KB
SHA256 8ef0d88716f2aaf935cea99fe2ea925ef04a26bb89c93ecc6dbfdfd57fd41da3
MD5 52d32e2de8b2b351dafa6df83663ebe8
SHA1 67ac1762444d68a4346ad4ceca64739b25d3571c
SHA512 8fae9aa7a9b1fd0fd0028843024ed2732dd393ed41faa47b831af0d5535be64ad1ee72e5c0f3e7041a27693c3eb6c52f3a92ae1b422a9af5064d1cb75bf622f5
SSDEEP 1536:/lE0Xl06FH5u5OqsU4jDAgX2A0YIMfXDEM:tXlL55q5MfZ
TLSH
T1F543AD5167FE1644F6F36F48AA7915644A7B7E9AAC3DC20C81840C5E1FB3A40C962F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ru-ru.txt

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\translations\ru-ru.txt
Size 51KB
SHA256 92217264a687fc9e381f4f54466b9935ddfe87a60d04344eba116e58f576f3a7
MD5 5cd21482b2dc427d83b5bcddc59b8f0a
SHA1 60731a948255aca3ab6232b78cc3b2efbf441f34
SHA512 2a14680fbc8ea3be317244a78140b0e6c726d4fa439bffb23c915ab1b34ba8679c07ad9b28926e9fa0b480ca996b760120d0459065385fd4474d250491a6b5c9
SSDEEP 768:Wj8pxn7qkJhnXUlWmcLIA+e1oo6caLEzI1GfGAk3jrGXjPNj3Bx1Fprbh:WjE1hXUgmcUA+e1o9fECnXGXj3Fprt
TLSH
T195331E25524765A90156B00BD8047E09BC6A0BBE3F7F33DD353A2D6E36FE42682E931D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vi-vn.txt

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\translations\vi-vn.txt
Size 38KB
SHA256 e96923db43128e92de17cdb3da1a1d94d54e2f25c7f2b4481980c444fa911297
MD5 92d03a24f4c3a1a6028e94f569401199
SHA1 a687903c5df5c7dab87ad1b1af9ee9e54d17f9e8
SHA512 bd9afbabf2bdfab067267ce49249182d3936f30f35823dbdbd51a142262c68ac0e1c088558fe375861ea7bd1e654743e3d93506ad784e6c4f261b9b8c6f02f26
SSDEEP 768:j7SgvljZglpNnAOy6XkE6hFCEmDrWSwQuP21G+lsN7PeKSuk19JH:j7SGjuTNnosohFCEmDrfwQOwLls9PeKW
TLSH
T19003C629A2C12A3644BE821DC049405AFEDE8F1E735C8E6D359F542C1F3EC176AE176C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-cn.txt

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\translations\zh-cn.txt
Size 51KB
SHA256 a8ff60248e00a7e63e1e95f2c84e9230538b1083b28d1d8f02b7fb0d5061f112
MD5 801987a3a5ec9c4b1da44166e07b2da2
SHA1 ba95d1a9eb88d29e69beab9d0191b1eaf82f78b9
SHA512 a09c99c943e6964f8211604b71ab289a43ab99336dddb81230977bb15b5f7b811578336c24f114122591a2c21ea6ddbe7762da2e510b27113ceb70f1c3eaa6d2
SSDEEP 1536:KKJEzUqGjg8p8md+pBGLzHx6n667Ew0oo0w:HTww
TLSH
T13833E63ED541CA742477824A6159152BF9100B1A633D4E1C385FAA0E6F6D83F2AFE37E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-tw.txt

Path C:\Users\Admin\Documents\Dreamtonics\Synthesizer V Studio\translations\zh-tw.txt
Size 51KB
SHA256 d268162b29d60dc31f9ea1988696afdd14e6166fe93f72fc221d7f44fc2e3ec8
MD5 9baad2c806f365146faaf302b2f8f68b
SHA1 feef55f6339bc291ec4f8290985df1ab689f11a3
SHA512 a365ef1b8f0b212ba74b9d16db9d6b74a7fa4807f0709b3ebbbdb5edaf64560ad9b5b872a2f5dcef0c731ed47c6782905f0f8f331828266377f23a8820a893e2
SSDEEP 768:gPrNP7Ip7nc8HIJzQQNqZxsOs5oEx3F23I4K5RIBDIesatbmlAkV0MqYg91G19ik:g5P+ykxZxsJNx3F0I4Kplmql6DhB0m0
TLSH
T18933D57ED442CE78247782493156196AF9140F2A2A3D0D2C3C5FAA0D6F6D83F56EA33D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2408-170-0x00007FFC3A5F0000-0x00007FFC3A5F2000-memory.dmp

Download

memory/2408-171-0x00007FFC3A600000-0x00007FFC3A602000-memory.dmp

Download

memory/2408-172-0x0000000140000000-0x0000000142AE2000-memory.dmp

Download

memory/3408-0-0x0000000000400000-0x00000000004D5000-memory.dmp

Download

memory/3408-169-0x0000000000400000-0x00000000004D5000-memory.dmp

Download

memory/3408-7-0x0000000000400000-0x00000000004D5000-memory.dmp

Download

memory/4736-16-0x0000000000400000-0x0000000000711000-memory.dmp

Download

memory/4736-168-0x0000000000400000-0x0000000000711000-memory.dmp

Download

memory/4736-163-0x0000000000400000-0x0000000000711000-memory.dmp

Download

memory/4736-26-0x0000000000400000-0x0000000000711000-memory.dmp

Download

memory/4736-24-0x0000000000400000-0x0000000000711000-memory.dmp

Download

memory/4736-18-0x0000000000400000-0x0000000000711000-memory.dmp

Download

memory/4736-14-0x0000000000400000-0x0000000000711000-memory.dmp

Download

memory/4736-12-0x0000000000400000-0x0000000000711000-memory.dmp

Download

memory/4736-8-0x0000000000400000-0x0000000000711000-memory.dmp

Download

memory/4736-9-0x00000000028A0000-0x00000000028A1000-memory.dmp

Download

memory/4736-6-0x00000000028A0000-0x00000000028A1000-memory.dmp

Download